Tracker / CVE-2024-40963
CVE-2024-40963
Medium 5.5
In the Linux kernel, the following vulnerability has been resolved: mips: bmips: BCM6358: make sure CBR is correctly set It was discovered that some device have CBR address set to 0 causing kernel panic when arch_sync_dma_for_cpu_all is called. This was notice in situation where the system is booted from TP1 and BMIPS_GET_CBR() returns 0 instead of a valid address and !!(read_c0_brcm_cmt_local() & (1 << 31)); not failing. The current check whether RAC flush should be disabled or not are not enough hence lets check if CBR is a valid address or not.
Affected products and versions
| linux | linux_kernel |
|---|---|
| linux | linux_kernel · 5.10.177 → 5.10.221 |
| linux | linux_kernel · 5.15.106 → 5.15.162 |
| linux | linux_kernel · 5.4.240 → 5.4.279 |
| linux | linux_kernel · 6.1.23 → 6.1.96 |
| linux | linux_kernel · 6.2.10 → 6.3 |
| linux | linux_kernel · 6.3.1 → 6.6.36 |
| linux | linux_kernel · 6.7 → 6.9.7 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.